Lucene search
HistoryJun 04, 2007 - 5:30 p.m.
CVE-2007-3009
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.072
Percentile
94.1%
Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the configuration disables logging, allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in the HTTP scheme, as demonstrated by a “GET %n://localhost:80/” request.
Affected configurations
Node
mbedthis_softwarembedthis_appweb_http_serverMatch2.0.5-4
| Vendor | Product | Version | CPE |
|---|---|---|---|
| mbedthis_software | mbedthis_appweb_http_server | 2.0.5-4 | cpe:2.3:a:mbedthis_software:mbedthis_appweb_http_server:2.0.5-4:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2007-3009
2007-06-04 17:00:00
exploitdb
exploitdb
Mbedthis AppWeb 2.2.2 - URL Protocol Format String
2007-06-12 00:00:00
cve
cve
CVE-2007-3009
2007-06-04 17:30:00
prion
prion
Format string
2007-06-04 17:30:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
AI Score
6.6
Confidence
High
EPSS
0.072
Percentile
94.1%
Related for NVD:CVE-2007-3009